Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7DA237B511E4C0915E90BDC56F26714A45428537.cer
File: 7DA237B511E4C0915E90BDC56F26714A45428537.cer (raw, json)
Hash identifier: zmYm68BBI+Oe+SnzFF2PnKaT8yXieEjwWk0os8OpPdE=
Subject key identifier: 7D:A2:37:B5:11:E4:C0:91:5E:90:BD:C5:6F:26:71:4A:45:42:85:37
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 08922FC2026D63FB6517A29C8BC140F48C293842
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/7DA237B511E4C0915E90BDC56F26714A45428537.mft
caRepository: rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 14 Feb 2025 18:49:30 +0000
Certificate not after: Fri 13 Feb 2026 18:54:30 +0000
Subordinate resources: AS: 28198
IP: 128.201.176.0/22
IP: 131.100.84.0/22
IP: 131.221.48.0/22
IP: 138.94.148.0/22
IP: 138.99.240.0/22
IP: 143.137.240.0/22
IP: 168.228.116.0/22
IP: 170.238.176.0/22
IP: 170.239.156.0/22
IP: 177.52.48.0/21
IP: 177.66.48.0/20
IP: 177.67.8.0/21
IP: 177.73.192.0/21
IP: 177.84.152.0/22
IP: 177.93.96.0/21
IP: 177.130.64.0/20
IP: 177.131.0.0/20
IP: 177.137.152.0/21
IP: 177.185.16.0/20
IP: 177.222.240.0/21
IP: 179.106.160.0/21
IP: 179.125.96.0/21
IP: 186.194.240.0/20
IP: 187.84.240.0/20
IP: 187.109.0.0/20
IP: 189.51.16.0/20
IP: 189.90.192.0/20
IP: 191.5.32.0/20
IP: 192.140.108.0/22
IP: 2804:884::/32
IP: 2804:c90::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:92:2f:c2:02:6d:63:fb:65:17:a2:9c:8b:c1:40:f4:8c:29:38:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 14 18:49:30 2025 GMT
Not After : Feb 13 18:54:30 2026 GMT
Subject: CN=7DA237B511E4C0915E90BDC56F26714A45428537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:76:f7:a0:ed:42:d1:47:d5:b5:d8:f1:7b:09:
6f:ae:46:08:1c:4b:7e:50:e2:8e:2c:17:9e:b1:a7:
0c:2e:2a:e0:71:36:31:8a:7f:d4:65:db:6f:b3:f8:
97:cf:b5:2c:58:b8:0d:78:db:dc:ce:04:7e:42:83:
99:e4:51:b7:20:88:cf:1f:84:2f:92:87:cd:6f:44:
61:e0:25:8f:73:6a:5e:2e:be:31:a0:54:ac:5b:95:
6c:5d:86:44:f7:d1:9c:8a:5f:59:4c:09:56:cb:0e:
b0:32:56:95:53:62:ac:7c:31:aa:70:80:b5:1a:a9:
f1:28:6f:05:35:94:a9:bd:67:d8:84:bf:96:92:fb:
63:ad:67:18:1d:01:d4:bf:9a:e9:9a:b2:f7:79:2f:
c3:64:15:23:d4:fd:47:9a:1d:ed:f1:58:7f:e4:0e:
26:81:df:62:15:89:f2:0c:2c:bc:92:4a:af:9c:15:
74:d0:b8:37:56:cc:21:48:99:f7:9d:16:19:b1:54:
45:62:08:66:24:2b:b7:05:48:47:76:65:f0:9c:be:
26:4f:e0:08:1f:e1:8a:61:46:26:99:08:9f:b4:d6:
06:7c:e3:8e:f4:ec:57:a3:38:5f:22:9f:b9:16:62:
ca:a7:4d:81:10:a2:65:0f:ec:ef:1f:5d:ed:a5:12:
1b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
7D:A2:37:B5:11:E4:C0:91:5E:90:BD:C5:6F:26:71:4A:45:42:85:37
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/7DA237B511E4C0915E90BDC56F26714A45428537.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.176.0/22
131.100.84.0/22
131.221.48.0/22
138.94.148.0/22
138.99.240.0/22
143.137.240.0/22
168.228.116.0/22
170.238.176.0/22
170.239.156.0/22
177.52.48.0/21
177.66.48.0/20
177.67.8.0/21
177.73.192.0/21
177.84.152.0/22
177.93.96.0/21
177.130.64.0/20
177.131.0.0/20
177.137.152.0/21
177.185.16.0/20
177.222.240.0/21
179.106.160.0/21
179.125.96.0/21
186.194.240.0/20
187.84.240.0/20
187.109.0.0/20
189.51.16.0/20
189.90.192.0/20
191.5.32.0/20
192.140.108.0/22
IPv6:
2804:884::/32
2804:c90::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28198
Signature Algorithm: sha256WithRSAEncryption
3f:93:f0:98:1e:51:0d:fa:df:80:5b:61:74:59:83:20:06:58:
97:d3:34:51:2e:96:6c:2b:3d:c4:6d:29:d6:d5:99:5e:9d:a3:
9a:10:e5:07:aa:a4:e4:ca:ba:3b:35:21:dc:d2:22:08:ab:01:
9b:5b:4a:a3:64:56:53:4b:48:a5:e9:55:71:33:2d:63:3a:d5:
b2:c3:c0:b9:89:7b:dc:7a:f9:9e:26:18:3c:cc:8c:d7:f1:90:
14:16:bb:ca:a8:de:19:d3:e1:1a:b7:18:cd:3e:1f:55:b5:98:
f5:f0:83:23:e5:60:d7:ca:ad:dc:e8:07:8b:10:ca:ce:e6:be:
ae:8a:79:e2:10:0d:db:49:91:78:b4:23:17:67:17:f4:45:bb:
10:9b:e5:d1:47:ad:f4:ca:40:52:94:2a:bb:6a:d5:f6:45:6a:
7c:e4:dc:3a:80:50:0c:60:29:d4:85:e9:e3:92:aa:21:b1:94:
45:fc:3e:9f:27:95:68:b2:26:df:c3:d4:0e:35:fb:0d:22:5a:
f2:ef:fd:3e:fe:fd:a4:6e:31:18:30:04:61:cf:89:8a:c5:d4:
a3:2e:21:e9:84:a1:8e:20:91:1d:9f:54:3a:cc:e9:51:f7:a8:
3e:52:c3:e5:10:2e:82:02:88:ba:b8:02:3e:2f:8e:70:a3:45:
48:c1:30:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:08:48 2025 by rpki-client